Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212817.roa
File: AS212817.roa (raw, json)
Hash identifier: fl0tMkdjp12axvYAdDRmljevoFrkMTNyuLdWAUdp+iU=
Subject key identifier: 0C:C7:D8:76:B8:CF:DC:2C:DF:34:1D:55:A4:ED:8B:82:70:D7:EB:51
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 42BB4A356C3F37B7D12B82AFCC128D8AA52B2664
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212817.roa
Signing time: Fri 09 Dec 2022 07:00:35 +0000
ROA not before: Fri 09 Dec 2022 06:55:35 +0000
ROA not after: Fri 08 Dec 2023 07:00:35 +0000
asID: 212817
IP address blocks: 2a06:a005:1330::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:bb:4a:35:6c:3f:37:b7:d1:2b:82:af:cc:12:8d:8a:a5:2b:26:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 06:55:35 2022 GMT
Not After : Dec 8 07:00:35 2023 GMT
Subject: CN=0CC7D876B8CFDC2CDF341D55A4ED8B8270D7EB51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:27:db:8e:46:9f:fa:ac:92:83:fc:2c:b6:
73:d1:b8:eb:c7:5b:b3:bf:af:43:87:4b:ae:c1:6c:
9b:c1:cd:1a:b6:ef:c5:ca:1c:21:e8:a7:ab:5a:f6:
e8:07:d7:09:d6:95:5a:85:b1:ef:42:90:d5:38:18:
88:16:45:5f:84:11:92:3c:15:bd:01:8d:f1:e8:85:
0e:41:58:2e:dd:24:bd:67:71:70:72:d5:90:c9:de:
ef:c2:60:ee:6a:01:ae:e6:36:16:66:4f:b9:27:91:
9f:d5:7b:ab:24:91:64:3b:48:cd:f9:18:62:b8:c2:
b8:df:a5:e9:2f:4c:5f:36:ad:43:83:e9:eb:c5:83:
5f:d8:f7:e5:7a:a7:42:ea:5b:21:9f:ea:76:67:7b:
c6:fc:39:9d:6c:b6:1b:03:54:4b:dd:31:da:83:f7:
7b:c8:db:9c:c5:ef:d3:71:b2:c9:c8:44:e7:be:2a:
41:20:18:9c:4f:fe:78:2e:f2:6d:3f:93:b3:5d:ff:
86:3f:c3:d9:43:ab:33:77:51:8c:84:26:f1:28:7d:
1f:9a:a5:81:02:da:d9:e9:f3:b3:4c:1d:82:4d:38:
70:70:0e:4e:6b:5d:15:c7:17:e3:4d:3d:98:0c:c9:
2e:c8:8f:f3:9e:d4:e8:bd:d3:3b:c3:9c:3c:44:30:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C7:D8:76:B8:CF:DC:2C:DF:34:1D:55:A4:ED:8B:82:70:D7:EB:51
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1330::/44
Signature Algorithm: sha256WithRSAEncryption
8a:d8:f4:0d:3d:ca:bd:80:2e:b4:4e:d8:f4:bf:32:10:d8:6b:
4d:e7:0c:7f:6d:8c:0d:37:9f:6a:50:46:2d:0a:63:1a:93:dd:
02:95:63:90:5a:f7:12:56:10:71:61:03:85:ce:5c:16:13:dc:
9f:44:12:bf:92:c4:14:c2:84:f4:e8:f0:2a:fd:8b:aa:2b:67:
01:82:d1:4e:72:08:7b:ad:b8:32:6c:b2:fb:a5:03:0f:0c:d7:
9b:ba:ce:bc:dd:9e:e9:ce:0e:f8:39:fd:3a:4a:ff:fc:aa:0a:
ea:ff:17:59:e0:4b:23:57:91:1f:1c:33:d9:05:d0:a4:67:80:
45:67:c8:fc:43:1a:bf:2c:b9:24:7d:c0:16:dd:9e:d4:1b:e1:
35:32:05:bf:29:6f:67:c5:8d:18:fe:06:dd:fb:af:bf:13:5a:
98:67:f0:68:9d:64:7a:05:df:36:9b:65:ea:2e:e2:7a:5d:f0:
4f:de:04:b6:0c:ce:e6:82:8f:db:4c:a4:be:7f:6b:e0:c0:ec:
93:10:fc:4a:5a:a3:c9:11:0b:eb:cd:54:81:9d:cf:c1:eb:a4:
f5:49:8c:ef:d6:a1:5f:41:de:3e:5c:ac:0e:54:fc:d3:96:4a:
22:7b:8a:f2:01:e6:95:00:7c:7b:f2:dd:8b:c1:fd:23:13:7e:
8e:87:7e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:50 2025 by rpki-client